Is WordPress Secure?

[Wilson Grant Fisk]

WordPress is one of the most high-profile open source CMS's in use today. Being that 60% of all CMS websites use Wordpress, and 31% of all websites on the Internet use it, it's safe to say that it's a frequent target of security exploits.

The subject of whether WordPress is secure or not has been at the core of infosec discussions for several years. With hundreds of thousands of WordPress websites getting hacked annually, the question remains: "Is WordPress really secure?”

Good Read: https://securitytrails.com/blog/is-wordpress-secure?from=relatedposts

 

[davids355]

I guess the answer is no. But that answer probably remains the same with any and every other cms platform.

Why? Because everything can be reverse engineers and because hackers are just as smart, if not smarter, than web developers- and probably have a greater motivation as well.

But the good thing about Wordpress is that it’s very well supported which probably makes it safer and more secure than most other alternatives.

 

[Deleted member 813988]

Depends on what you do to secure it

 

[blogzandstuff]

Depends on what you do to secure it

Yes exactly right, I see so many people use admin to login lol!
I hide login page, theme , stop right click inspect etc. I also use three login stages, including secret question and answer. Get one part of the stage wrong and you're locked out

 

[Veil123]

Yes exactly right, I see so many people use admin to login lol!
I hide login page, theme , stop right click inspect etc. I also use three login stages, including secret question and answer. Get one part of the stage wrong and you're locked out

Well, It is not about the login, but the plugin exploits from the creators. That is the one and only place where the exploits can "show up" every now and then.
Nowadays, only the newbies go through the login as those websites that you can get from there will be most likely not worth a penny.

 

[p3n7357]

nothing is secure on internet even wordpress

 

[blogzandstuff]

Well, It is not about the login, but the plugin exploits from the creators. That is the one and only place where the exploits can "show up" every now and then.
Nowadays, only the newbies go through the login as those websites that you can get from there will be most likely not worth a penny.

that's why you should only use trust paid for plugins and themes, keep them updated. Best make it difficult. Not just about logins, but common sense. nothing is really secure if they want to get in

 

[Aty]

Secure or not, people use it because of its simplicity.

 

[Deleted member 923340]

Drupal is the most security feature rich cms there is.
A ton of enterprises uses Drupal for this reason.
https://www.drupal.com/showcases

Even Redhat uses Drupal.

 

[SEOmammoth]

It's as secure as it gets. With all the features, it's better than all its competitors.

Good read tho

 

[Deleted member 813988]

Yes exactly right, I see so many people use admin to login lol!
I hide login page, theme , stop right click inspect etc. I also use three login stages, including secret question and answer. Get one part of the stage wrong and you're locked out

I also use Sucuri!

 

[whiteblackseo]

There's a reason why security companies like Wordfence and Sucurii are thriving, the need for security in WP sites are detrimental right now.

 

[Jake Gib]

I think it is pretty secure but there are certain things you can do to even secure it more.

 

[HelloBTCMINER]

Drupal is the most security feature rich cms there is.
A ton of enterprises uses Drupal for this reason.
https://www.drupal.com/showcases

Even Redhat uses Drupal.

Even White House too!

 

[bmfuxia]

Honestly any site that provides a website build where you can just drag and drop things isn't secure, The only secured site is if you code it yourself from scratch, a good old html coding should do the job.

 

[Mr Dingle]

A common feature of WP is the need to improve all the basic features.
The security is like locking the door and leaving the key under a brick
I know from experience that sorting a hacked WP website doesn't have a funny side
Now I use html with a live ftp connection from my desktop. Posting is quick and easy, also I could replace the entire website in minutes if I got hacked

 

[bmfuxia]

A common feature of WP is the need to improve all the basic features.
The security is like locking the door and leaving the key under a brick
I know from experience that sorting a hacked WP website doesn't have a funny side
Now I use html with a live ftp connection from my desktop. Posting is quick and easy, also I could replace the entire website in minutes if I got hacked

pretty much the good thing about html if you get hacked its easy to replace or get things back, meanwhile things like WP you get hacked everything will be gone.

 

[DanDD]

better than other cms's and better than reinventing the wheel

 

[crissdinesh]

WordPress is not completely secured. Many WP sites are vulnerable.

 

[Mr Dingle]

pretty much the good thing about html if you get hacked its easy to replace or get things back, meanwhile things like WP you get hacked everything will be gone.

True, and with AMP html you get a lot of ready made components with the javascript aspect taken care of. I've been giving it a go and absolutely love it